CLSA-2022-1667496000 Update of tzdata

Upgrade to tzdata-2022c - Add a work-around for an awk bug in FreeBSD, macOS, etc - Improve tzselect with respect to intercontinental Zones - Chile transitions to DST on 2022-09-11, not 2022-09-04 - 'make install' now defaults LOCALTIME to Factory rather than GMT - More zones that are the same...

rubygem-tzinfo: arbitrary code execution

A flaw was found in rubygem-tzinfo. When using the Timezone.get function, it fails to validate time zone identifiers correctly, allowing a new line character input within the identifier. This flaw allows an attacker to use the new line character and write any code, which will be executed within t...

tzdata bug fix and enhancement update

An update is available for tzdata. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The tzdata packages contain data files with rules for various time zones. The...

CVE-2022-43028

Tenda TX3 USTX3V1.0brV16.03.13.11multiTDE01 was discovered to contain a stack overflow via the timeZone parameter at /goform/SetSysTimeCfg...

Joining new DDC to Multi-Zone CVAD Site fails

New DDC join process to a multi-zone CVAD site spread across different datacenters fails. This happens at the step when each service on the new DDC tries to register with Citrix Configuration service...

Tenda TX3 缓冲区错误漏洞

Tenda TX3 is a wireless router from Tenda, a Chinese company. A security vulnerability exists in Tenda TX3 that originates from a stack overflow contained in the timeZone parameter of /goform/SetSysTimeCfg. No details of the vulnerability are provided at this time...

OESA-2022-1993 dhcp security update

The Dynamic Host Configuration Protocol DHCP is a network management protocol used on UDP/IP networks whereby a DHCP server dynamically assigns an IP address and other network configuration parameters to each device on a network so they can communicate with other IP networks. Security Fixes: In...

D-Link COVR 命令注入漏洞

D-Link COVR is a series of routers from China-based AUO D-Link. A security vulnerability exists in D-Link COVR versions 1200, 1202, 1203 v1.08, which originates from a command injection vulnerability contained via the systemtimetimezone parameter in the function SetNTPServerSettings...

PT-2022-20302 · Unknown +2 · Zoneminder +2

Name of the Vulnerable Software and Affected Versions: ZoneMinder version 1.36.12 Description: A Stored Cross Site Scripting XSS issue allows an attacker to execute HTML or JavaScript code via the Username field when an Admin or non-Admin users that can see other users logged into the platform...

August 9, 2022—KB5016639 (OS Build 10240.19387) - EXPIRED

None None...

October 11, 2022—KB5018427 (OS Build 22621.674)

None None...

October 11, 2022—KB5018425 (OS Build 10240.19507) - EXPIRED

None None...

October 11, 2022—KB5018421 (OS Build 20348.1129)

None None...

October 11, 2022—KB5018419 (OS Build 17763.3532) - EXPIRED

None None...

Cisco IOS XE Software IPv6 VPN over MPLS DoS (cisco-sa-iosxe-6vpe-dos-tJBtf5Zv)

A vulnerability in the implementation of IPv6 VPN over MPLS 6VPE with Zone-Based Firewall ZBFW of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service condition on an affected device. This vulnerability is due to improper error handling of an IPv6...

CVE-2022-20915

A vulnerability in the implementation of IPv6 VPN over MPLS 6VPE with Zone-Based Firewall ZBFW of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper error handling of an IP...

CVE-2022-20915

CVE-2022-20915 affects Cisco IOS XE Software implementing IPv6 VPN over MPLS 6VPE with Zone-Based Firewall (ZBFW). A crafted IPv6 packet forwarded from an IPv6-enabled VRF interface can cause the device to reload, producing a DoS. The issue arises from improper error handling of such packets on M...

Huawei EulerOS: Security Advisory for ldns (EulerOS-SA-2022-2510)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-20915: Misinterpretation of Input

A vulnerability in the implementation of IPv6 VPN over MPLS 6VPE with Zone-Based Firewall ZBFW of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper error handling of an IP...

DEBIAN-CVE-2022-39289

ZoneMinder is a free, open source Closed-circuit television software application. In affected versions the ZoneMinder API Exposes Database Log contents to user without privileges, allows insertion, modification, deletion of logs without System Privileges. Users are advised yo upgrade as soon as...